diff --git a/.gitea/workflows/action.yml/action.yml b/.gitea/workflows/action.yml/action.yml index f6a7702..830c42b 100644 --- a/.gitea/workflows/action.yml/action.yml +++ b/.gitea/workflows/action.yml/action.yml @@ -19,6 +19,12 @@ jobs: - name: Checkout code uses: actions/checkout@v4 + - name: Manual Trivy Setup + uses: aquasecurity/setup-trivy@v0.2.0 + with: + cache: true + version: v0.68.1 + # Combined scan for vulnerabilities, secrets, and IaC misconfigurations - name: Run Trivy comprehensive security scan uses: aquasecurity/trivy-action@0.33.1 @@ -35,6 +41,7 @@ jobs: ignore-unfixed: false # Skip database update to speed up scans (uses cached DB) skip-db-update: false + skip-setup-trivy: true # Display results for visibility - name: Display Trivy scan results